WantAuthnRequestsSigned

Takes a value of true or false. If true, all authentication requests received by this identity provider must be signed.

ArtifactResolutionService

Defines the endpoint(s) that support the Artifact Resolution profile. 

SingleLogoutService

Defines the endpoint(s) that support the Single Logout profiles. 

ManageNameIDService

Defines the endpoint(s) that support the Name Identifier Management profiles. 

NameIDFormat

Defines the name identifier formats supported by the identity provider. Name identifiers are a way for providers to communicate with each other regarding a user. Single sign-on interactions support two types of identifiers: 

• A persistent identifier is saved to a particular user's data store entry as the value of two attributes.

• A transient identifier is temporary and no data will be written to the user's persistent data store.

More information about name identifiers is in Single Sign-on.

SingleSignOnService

Defines the endpoint(s) that support the profiles of the Authentication Request protocol. All identity providers must support at least one such endpoint.